CVE-2023-53559

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab use-after-free flaw exists in the ip vti (IPsec Virtual Tunnel Interface) implementation within the vti tunnel xmit() function of the net/ipv4/ip vti.c module. The issue occurs when an ip vti device is configured with a qdisc (queueing discipline) of the sfb type and sends IPv6 packets. During the enqueuing process, the cb field of the socket buffer (skb) may be modified, leading to a use-after-free condition when the decode session6() function is called. This can be triggered by a local user with CAP NET ADMIN capabilities, potentially resulting in kernel panic, memory corruption, or impacts on confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.